إرسال #864856: GitHub wondertrader 0.9.9 Incorrect Comparisonالمعلومات

عنوانGitHub wondertrader 0.9.9 Incorrect Comparison
الوصفWonderTrader’s TraderDD queryTrades() path incorrectly uses strncpy(buf, "1", 1) == 0 to classify DD broker trade records as open or close. Because strncpy() returns the destination pointer rather than a comparison result, trades with FID_JYLB=1 are misclassified as WOT_CLOSE instead of WOT_OPEN. During startup or reconnect trade replay, this undercounts daily opened volume in _stat_map, allowing configured ActionPolicy open-volume limits to be bypassed and enabling oversized positions.
المصدر⚠️ https://my.feishu.cn/wiki/BMjWwb5c3iEkgIkwi3wcOAKjnpc
المستخدم
 sannomiya (UID 98147)
ارسال21/06/2026 02:54 PM (2 أشهر منذ)
الاعتدال07/08/2026 10:31 AM (2 months later)
الحالةتمت الموافقة
إدخال VulDB386953 [WonderTrader حتى 0.9.9 TraderDD.cpp TraderDD::queryTrades FID_JYLB تجاوز الصلاحيات]
النقاط20

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!